---
typeId: req
recordId: benac-enc-016
fields:
  title: Integrity after decryption
  statement: Benac shall verify decrypted blob integrity against the expected
    plaintext CID or plaintext verification metadata before package execution,
    evidence interpretation, further sharing, or output acceptance.
  rationale: Encrypted storage protects confidentiality but integrity must still
    be verified.
  verification: Tampered ciphertext or wrong key fails integrity verification.
  testable: true
  status: draft
  area: BENAC-ENC
  sourceDocument: /home/johnb/Downloads/benac_syrs_v0_4_integrated_authentication.md
  sourceVersion: v0.4
  sourceSections:
    - 10.6 Encryption, decryption, and disclosure control
  order: 70
---
